Application Security Engineer Java
Posted on Dec 12, 2018 by Request Technology - Craig Johnson
Prestigious Enterprise Company is currently seeking an Application Security Engineer with Java development experience. Candidate will work with developers to diagnose, document, and remediate application security vulnerabilities. Candidate will also be responsible for evaluating, recommending, and implementing application security related software in an automated continuous integration/deployment environment.
Develop and maintain a balanced application security program based on a well-defined application security framework
Conduct application security assessments/penetration tests and implement tools for dynamic/automated code reviews
Ensure application design and implementation best-practice with role-based and appropriate access standards, as well as integration with Identity and Access Management environments.
Ensure compliance with society, regulatory, and industry standards for application security.
Continuously evaluate the organization's existing application security practices, define and measure security-related activities, and demonstrating concrete improvements to the application assurance program within the organization.
Provide secure application development training to developers and provide guidance on the development of web-based training for ongoing awareness.
Conduct code reviews and penetration testing
Develop and maintain unit and integration tests designed to ensure security controls are tested on every build
3+ years progressive experience in Application Development and Information Security
Strong understanding of application security concepts for Internet technology, architecture and protocols
OWASP and CWE concepts